Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File: ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier: UWPrUtADEF5YoGwCiBWvB+XbPjOFdVsStp8ex1qc59w=
Subject key identifier: EA:D3:30:8B:87:56:C9:5F:98:34:58:A3:F3:46:CD:D3:EC:69:B8:4C
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer: /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial: 01A0570CCFFABB8DDCAB39AAAB28CB73C151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number: 1A2F
Signing time: Mon 31 Aug 2026 09:00:52 +0000
Manifest this update: Mon 31 Aug 2026 09:00:52 +0000
Manifest next update: Tue 01 Sep 2026 09:00:52 +0000
Files and hashes: 1: 60TwTXZ3s8c9GnAKSlAJ3NgM0QI.roa (hash: EZkxwCyWCEu1KeBrV5jR0jwiImpY2bsUjKB0OADSv0M=)
2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: YXRWblykqEixWiE5YNUgK/iCpS7r+KIjV3bHFrav7Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:0c:cf:fa:bb:8d:dc:ab:39:aa:ab:28:cb:73:c1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Validity
Not Before: Aug 31 09:00:52 2026 GMT
Not After : Sep 1 09:00:52 2026 GMT
Subject: CN=ead3308b8756c95f983458a3f346cdd3ec69b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:2f:96:6f:cf:de:20:73:a5:d3:0a:46:a5:
f4:4d:9d:ce:d7:aa:da:de:bb:66:72:bf:3b:97:45:
3e:86:78:a5:cf:e7:ad:9b:80:48:95:b5:ea:b0:15:
78:33:72:56:af:82:0a:3c:0b:b2:1e:7a:4f:c4:c2:
a3:e1:cf:bd:66:8a:19:1b:9b:3d:4e:dc:8e:e4:4e:
9a:8e:5b:53:d6:4d:09:a7:70:57:d1:93:1e:b7:a3:
ef:00:5b:29:85:fa:42:f4:05:66:5d:c5:e1:a5:8e:
88:16:34:90:d9:12:cf:97:24:ad:38:fa:a1:f8:bd:
be:85:ef:4f:80:16:94:73:f7:43:98:c0:d8:92:9a:
1d:da:58:53:b0:33:32:64:50:b3:70:0d:6b:ab:9a:
41:75:7d:b5:81:68:5a:70:47:25:db:4d:f4:ff:39:
bb:ec:95:d1:93:1c:17:fb:5d:72:fa:64:0b:da:06:
e5:ab:c3:02:85:73:b8:60:75:f0:1f:2f:07:63:05:
cb:b0:59:5a:3e:09:63:3b:af:cc:19:dd:54:49:63:
6f:c1:71:6f:3d:fd:9b:d5:a2:20:c4:70:42:b4:26:
b8:55:c2:76:8e:ce:b7:0a:de:27:4c:1f:84:3c:56:
7a:96:64:06:a3:ad:c5:7a:a9:8d:6e:ff:5f:a6:ca:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D3:30:8B:87:56:C9:5F:98:34:58:A3:F3:46:CD:D3:EC:69:B8:4C
X509v3 Authority Key Identifier:
keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:d8:72:11:41:d0:f8:95:e3:ff:15:93:86:b9:7b:75:e8:
69:40:46:82:fc:6b:7d:75:02:fb:f0:ed:ee:d4:02:48:a2:fc:
42:00:06:e0:15:d1:f3:f1:d5:58:4f:52:6c:e1:3f:46:00:59:
e8:71:0a:5d:fb:3a:dc:ac:92:8b:b1:cd:e8:e9:6d:d4:bb:2f:
d6:13:5e:c4:a4:f3:07:76:2f:cf:f7:ce:e3:92:4e:24:47:c2:
ab:80:67:17:7c:a7:a0:a6:27:dc:09:f3:84:ef:0c:0c:68:04:
d9:63:9e:4d:6b:58:c8:4d:16:7b:eb:06:cd:53:4d:9c:c4:10:
a4:1a:18:f9:11:68:63:35:55:08:36:9e:51:e2:40:db:64:bd:
d7:95:11:8d:9e:96:a4:33:ec:a2:f9:46:c9:b6:ce:3a:34:ba:
b9:fb:07:36:84:0c:36:26:ba:fb:f1:e0:ba:83:c2:6e:0b:0c:
5f:e1:8f:c2:9b:5d:cb:4f:2a:91:18:32:00:fb:16:06:77:9a:
68:c5:71:a2:f9:06:90:84:ad:8b:5d:b6:8b:bc:06:d5:41:bb:
aa:14:e6:00:32:8e:80:aa:1a:8c:e1:5c:74:3b:f3:f7:0e:75:
b5:b1:d7:5d:3d:7e:39:f3:d6:fe:ee:ae:1e:d9:9c:f0:35:98:
58:23:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:02:30 2026 by rpki-client